Overview

overview

10

Static

static

10

1924-56-0x...ry.exe

windows7-x64

10

1924-56-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1924-56-0x00000000005C0000-0x00000000005CC000-memory.dmp

  • Size

    48KB

  • MD5

    63ac11583d62727804218c3cdc3932fe

  • SHA1

    a8eeccc40526098f8e559c2eba05c76f2b6e60a5

  • SHA256

    9b7c4cf1c31e4a814d49c7e397736527eb0ca2906b72166cdf86841f6b7e5904

  • SHA512

    17e10ae93eee04a854d0bff6e3bba059c629b1a3009ff058323067543d3d34045ebca33d445166d4de6c93d5c81be4765cc8d52208c20d6caa02c491bdd7b44b

  • SSDEEP

    384:tweXCQIreJig/8Z7SS1fEBpng6tgL2IBPZVmRvR6JZlbw8hqIusZzZGF:SLq411eRpcnud

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

veprex.hopto.org:5552

Mutex

83b7e568a26ebaedf41a9c3879a1e2a8

Attributes
  • reg_key

    83b7e568a26ebaedf41a9c3879a1e2a8

  • splitter

    |'|'|

Signatures

Files

  • 1924-56-0x00000000005C0000-0x00000000005CC000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections